13654 matches found
Microsoft SQL Server 竞争条件问题漏洞
Microsoft SQL Server is a large commercial database system from Microsoft Corporation that is used under Microsoft Windows. A competitive condition issue vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could gain access to sensitive information. The followi...
Himmelblau 安全漏洞
Himmelblau is an Azure Entra ID authentication module open-sourced by Himmelblau. A security vulnerability exists in Himmelblau versions 0.9.0 to 0.9.22, which stems from the derivation of a numeric GID from a group display name, which could lead to authorization bypass...
KB5065432: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (September 2025)
The remote Windows host is missing security update 5065432 or hotpatch 5065306. It is, therefore, affected by multiple vulnerabilities - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform rela...
PT-2025-36895
Name of the Vulnerable Software and Affected Versions: Azure Arc affected versions not specified Description: The software contains a flaw related to external control of file name or path. This allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is n...
Microsoft Azure 访问控制错误漏洞
Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Azure. An attacker can exploit the vulnerability to elevate privileges...
PT-2025-37014
@CVEnew @trevor lawson24 @grok Yikes, deriving GIDs from display names is a wild choice. This CVE-2025-59044559049044 in Himmelblau 0.9.x is a serious interoperability flaw for Azure Entra ID and Intune. You two should definitely take a look...
Microsoft Azure Connected Machine Agent 安全漏洞
Microsoft Azure Connected Machine Agent is a U.S.-based Microsoft Corporation's Microsoft ability to manage Windows and Linux computers hosted outside of Azure on a corporate network or other cloud provider. A security vulnerability exists in Microsoft Azure Connected Machine Agent. An attacker...
PT-2025-36817
Name of the Vulnerable Software and Affected Versions: Azure Windows Virtual Machine Agent affected versions not specified Description: An improper access control issue exists in the Azure Windows Virtual Machine Agent. This allows an authorized attacker to elevate privileges locally...
KLA87441 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Connected Machine...
Exploit for CVE-2025-54914
Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914...
CVE-2025-55244
Azure Bot Service Elevation of Privilege Vulnerability...
CVE-2025-54914
Azure Networking Elevation of Privilege Vulnerability...
CVE-2025-55241
Azure Entra ID Elevation of Privilege Vulnerability...
MAL-2025-43554 Malicious code in azure-iot-stresstests (npm)
The package azure-iot-stresstests was found to contain malicious code...
Malicious code in azure-open-ai-accelerator (npm)
The package azure-open-ai-accelerator was found to contain malicious code...
Malicious code in azure-iot-stresstests (npm)
The package azure-iot-stresstests was found to contain malicious code...
MAL-2025-43555 Malicious code in azure-open-ai-accelerator (npm)
The package azure-open-ai-accelerator was found to contain malicious code...
Azure mandatory multifactor authentication: Phase 2 starting in October 2025
As cyberattacks become increasingly frequent, sophisticated, and damaging, safeguarding your digital assets has never been more critical, and at Microsoft, your security is our top priority. Microsoft research shows that multi-factor authentication MFA can block more than 99.2% of account...
Azure mandatory multifactor authentication: Phase 2 starting in October 2025
As cyberattacks become increasingly frequent, sophisticated, and damaging, safeguarding your digital assets has never been more critical, and at Microsoft, your security is our top priority. Microsoft research shows that multi-factor authentication MFA can block more than 99.2% of account...
